Ben bir sorgu var

$sql ="SELECT CustomerID FROM tblCustomer 
WHERE EmailAddress = '".addslashes($_POST['username']) ."' AND Password = '".addslashes($_POST['password']) ."'";

//  while printing,   it will be

SELECT CustomerID FROM tblCustomer WHERE EmailAddress = 'test@ab\'c.com' AND Password = '123'

Biz mysql sunucu bu yürütme eğer bir sql server çalışır, ancak

what is the solution for this? . Iam using sql server